NFC · WebRTC · 100% Local · GDPR-compliant

Access Control & Intercom — cloud-free access with Loxone.

NFC Code Touch, WebRTC video doorbell without cloud relay and local visitor logs. 100% GDPR-compliant — no US jurisdiction, no subscription required.

TL;DR — Citable summary

Loxone controls door openers and video doorbell completely locally via WebRTC (end-to-end encrypted, no cloud relay) and NFC Code Touch — without US server access, without subscription. Visitor logs reside exclusively on the local Miniserver and can be exported or deleted in a GDPR-compliant manner. HELITS optionally integrates access control into HELITS-HRIS for automatic provisioning during employee on- and offboarding — for SMEs and mid-sized DACH companies in the Berchtesgaden and Traunstein area.

How Loxone access control works

From the NFC token to WebRTC video — all components communicate directly with the Miniserver, without detour through external servers.

lock

NFC Code Touch

The NFC Code Touch (Indoor IP54, Outdoor IP65) accepts PIN code (4–8 digits), MIFARE Classic/Ultralight/DESFire tokens and NFC-capable smartphones. Time-bound codes — e.g. for tradespeople Mon–Fri 8–17 h — are configured directly in the Miniserver, without additional hardware. The outdoor variant is vandalism-proof and operates down to –25°C; ideal for alpine locations like the Berchtesgaden area.

security

WebRTC Intercom — no cloud relay

The Loxone Intercom transmits audio and video via WebRTC directly between door station and Loxone App — end-to-end encrypted, without server detour. This means: no US cloud provider in the data path, no CLOUD Act jurisdiction, no monthly subscription. Conversation data never leaves your local network or the direct P2P channel. Compared to Ring (Amazon), Arlo and Nest (Google), a decisive GDPR advantage for companies and data protection officers.

history

Local visitor logs

Every opening event is stored locally on the Miniserver (internal SD card or NAS) with timestamp, identification method and door ID. No automatic cloud synchronization. For GDPR information requests (Art. 15), entries for a person can be selectively exported; for deletion requests (Art. 17) individually or by time period – completely without vendor support ticket.

people

Rights management & multi-site

Access profiles are user- and time-bound: Employee A may access office and warehouse, Employee B only reception — each at configured times. For multiple sites, the Loxone Config Link Manager synchronizes profiles across Miniserver networks: one change in the system takes effect everywhere immediately. No manual double maintenance in separate systems.

Integration into existing systems

Loxone communicates with KNX door stations, existing locks and ERP/HRIS systems — without proprietary gateway.

hub

KNX door stations

Existing KNX video door stations (e.g. Siedle, Jung, Gira) can be integrated into Loxone via KNX Extension. Door bell impulse triggers scene: hallway light on, display popup, door opener relay at the push of a button.

lock

Motor locks & door openers

Electric door openers, motor locks and door magnetic locks (12/24 V DC) are controlled directly via Loxone relays. For retrofitting without electrical access: API integration of Nuki Pro via HTTP command.

people

HELITS-HRIS integration

On- and offboarding in HELITS-HRIS automatically triggers access provisioning: new employee → access group activated; departure → all rights immediately revoked. No manual code maintenance.

shield

100% local — no US jurisdiction

Ring (Amazon), Nest (Google) and Arlo store doorbell videos and access data on US servers — subject to the CLOUD Act, which allows US authorities access without European mutual legal assistance. Loxone stores exclusively locally. For GDPR officers, works councils and SME managers who do not want to enter into data processing agreements with US providers, this is not a comfort feature but a compliance requirement.

Typical application scenarios

SFH with family codes

Private

Parents NFC token, children PIN, cleaner weekday code 8–18 h. Vacation mode: delivery person rings, camera snapshot via push.

Office with tradesperson time codes

Commercial

Plumbing company receives time code for Tue–Wed 7–12 h, automatically deactivated. No key handover, no forgotten key.

SME multi-site DACH

Multi-site

Headquarters Anger + branch Salzburg: one profile, both sites. Employee offboarding in HRIS immediately revokes all access rights at all locations.

Coworking space NFC

Coworking

Members receive daily NFC tokens via app. Access data stored locally for occupancy analysis — no US cloud provider in the data path.

HELITS — Your partner in Bavaria & DACH

GDPR-critical access systems need a partner who understands why "no cloud" is not an option but a requirement — and who can be on-site within 60 minutes in an emergency. HELITS is a Loxone partner with headquarters in Anger (Berchtesgaden district) and serves customers in Bad Reichenhall, Berchtesgaden, Traunstein and the Salzburg area.

In the DACH region, Loxone partners with deep GDPR expertise and simultaneous HRIS/ERP integration experience are rare. HELITS combines Loxone expertise with its own LYRION ERP and HELITS HRIS — a combination that enables fully automated access provisioning without third-party providers.

For companies that do not want to enter into US cloud dependencies and at the same time need modern, convenient access control, the Loxone solution with HELITS integration is today the most economically attractive option in the DACH market.

location_on
On-site service
Anger, Bad Reichenhall, BGL, Traunstein, Salzburg
verified
GDPR-compliant
Local data storage, no US cloud relay
task_alt
HRIS integration
Auto-provisioning during on/offboarding
support_agent
Loxone Partner
Certified system integrator DACH

Costs & indicative prices

Guide prices without guarantee — individual offers based on survey and requirements.

Basic
from 900 €
Single-family home
  • check_circle1 NFC Code Touch Outdoor
  • check_circle1 door opener relay
  • check_circleIntercom door station
  • check_circleApp integration
  • check_circleConfiguration & instruction
Standard
from 2,800 €
SME / Commercial
  • check_circle3–5 code touch points
  • check_circleTime codes & user groups
  • check_circleLocal visitor log
  • check_circleCamera integration
  • check_circleGDPR documentation
Premium
on request
Multi-site / HRIS
  • check_circleAny number of access points
  • check_circleMulti-site sync
  • check_circleHRIS provisioning
  • check_circleUPS integration
  • check_circleSLA support

Process in 4 steps

01

Analysis

Assessment: doors, locks, KNX infrastructure, GDPR requirements, user groups.

02

Concept

Hardware selection (NFC Code Touch, intercom, door opener), rights matrix, HRIS interface design.

03

Installation

Assembly, wiring, Miniserver programming, user profiles, test runs of all access points.

04

Support

Instruction, GDPR documentation, optional SLA with remote monitoring and on-site response time.

Frequently asked questions about Loxone access control

Is the Loxone Intercom really without cloud?expand_more
Yes. The Loxone Intercom uses WebRTC with end-to-end encryption and requires no cloud relay. The video and audio signal is transmitted directly between door station and app – exclusively within your network or via a direct P2P tunnel without detour through US servers. This means no conversation data is subject to US jurisdiction or CLOUD Act requirements: a decisive advantage over Ring, Arlo and Nest.
Which identification methods does the NFC Code Touch support?expand_more
The Loxone NFC Code Touch supports PIN code (4–8 digits), NFC tokens (MIFARE Classic/Ultralight/DESFire), NFC-capable smartphones and Loxone app permissions. Indoor and outdoor variants are IP54 and IP65 protected respectively. Time-controlled codes (e.g. for tradespeople Mon–Fri 8–17 h) are configured directly in the Miniserver without additional hardware.
How is visitor data stored in accordance with GDPR?expand_more
All access logs are stored exclusively locally on the Loxone Miniserver on the integrated SD card or a NAS in the home network. No automatic synchronization to cloud services takes place. On request (GDPR Art. 15), entries for a person can be selectively exported or deleted (Art. 17). A data protection impact assessment is generally not required for pure access systems in the private sector.
Can Loxone access control be linked to our HR system?expand_more
Yes. HELITS offers direct integration of LYRION-ERP / HELITS-HRIS with the Loxone access control. When an employee is onboarded or offboarded in the HRIS, the access group is automatically provisioned or revoked – without manual maintenance of code lists. The interface uses Loxone HTTP commands or Miniserver API; no additional gateway required.
What happens to access control during a power failure?expand_more
The Loxone Miniserver has an internal buffer battery for short power failures. For critical accesses we additionally recommend UPS (uninterruptible power supply). Door openers should be chosen as 'fail-safe' (open on power failure) or 'fail-secure' (locked on power failure) depending on escape route regulations – we advise you on the correct variant according to ASR A2.3.
How many access authorizations can Loxone manage?expand_more
A Loxone Miniserver manages unlimited codes and NFC tokens – the limit is only in working memory (in practice several thousand entries without problems). For multi-site installations with multiple Miniservers, authorizations can be synchronized via the Loxone Config Link Manager, so that one access profile applies to all sites simultaneously.
Does Loxone support smart locks (Bluetooth locks)?expand_more
Loxone primarily controls electric door openers, motor locks and door magnetic locks via potential-free relay contacts – no proprietary Bluetooth dependency. For retrofitting on existing locks without electrical access, we recommend certified retrofit smart locks (e.g. Nuki Pro) that can be integrated via API into Loxone: Loxone sends HTTP command → Nuki opens. No battery failure risk at critical accesses.
Is a Loxone access solution suitable for multi-family homes?expand_more
Yes. With a central Miniserver per building or stairwell, main entrance, underground garage and individual apartment doors can be managed separately. Tenants receive their own NFC tokens or time codes for their floor; shared areas can be unlocked during the day and locked at night. The intercom shows residents on the display who is ringing at the front door – via app also from a distance.

GDPR-compliant access control — local, secure, convenient.

No US cloud provider in the data path. No subscription. No key management. Schedule a consultation now.

mail[email protected]